Web Application Firewall

WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls

Finding methods to bypass Web Application Firewalls (WAFs) by mutating HTTP requests using fuzzing approaches.

Seyed Ali Akhavani, Bahruz Jabiyev, Ben Kallus, Cem Topcuoglu, Sergey Bratus, Engin Kirda

Last updated on Mar 12, 2026